Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: WITl/unxW7HYGdMidvOTc8ceTKa0jfvuMZZLtHCg9C0=
Subject key identifier: 87:BE:D2:8C:49:AE:04:00:63:67:FA:1E:FC:DE:72:5A:99:20:EB:6F
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019D9AABBB5591FE752CCEADC283C6B5B7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0D33
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: UxTQC4DRxTeSqVg2hj8D1L4RFEXnHwsOj7ZVk8e8Rm4=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bb:55:91:fe:75:2c:ce:ad:c2:83:c6:b5:b7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=87bed28c49ae04006367fa1efcde725a9920eb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:d5:d2:0c:af:16:0d:78:11:e1:f3:c1:89:
89:4d:9d:8f:23:9d:cb:b1:f4:1f:e2:6d:73:0f:00:
54:8b:ca:ce:41:c6:83:5e:46:65:0a:ba:38:06:21:
0e:44:f1:08:f2:47:f5:b1:42:de:ca:d2:a5:8c:9e:
85:32:81:69:f6:95:92:d7:e5:99:89:b7:c0:74:1b:
87:fd:8f:00:1e:f1:58:87:95:61:97:c9:f0:0b:82:
6c:f8:6d:fe:43:56:78:90:8b:a5:fb:6d:82:9d:73:
c8:2a:e0:46:6e:ee:87:cb:df:64:15:25:c0:c2:49:
e5:36:ec:6e:ff:68:0d:1e:c5:c9:cd:94:81:c3:61:
65:e7:06:80:13:03:3f:af:38:60:90:44:a8:6b:c4:
24:93:e7:a0:48:cf:b3:c3:ee:22:2d:cb:de:8c:32:
c2:ed:4d:45:27:64:f9:dd:aa:f9:eb:91:97:06:11:
8f:63:48:38:f4:3c:12:51:e2:c1:01:5a:cb:f2:27:
81:27:ba:d9:7e:cb:6d:53:0b:7f:19:27:5e:eb:fa:
96:1f:d5:f5:6b:27:9f:29:87:b0:a5:63:9d:5e:05:
eb:bb:85:46:ea:af:a5:76:2c:cc:71:c6:7b:3d:41:
7d:2c:ef:82:d4:2f:37:1f:ab:77:61:a5:4e:af:5c:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:D2:8C:49:AE:04:00:63:67:FA:1E:FC:DE:72:5A:99:20:EB:6F
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:17:8b:1f:69:f6:cb:bf:1a:2c:36:72:f5:6a:70:f1:3d:
91:82:81:3b:bc:ca:d4:c5:72:ec:1f:0a:a0:7d:77:43:00:5d:
c8:45:48:67:24:aa:e9:7f:f0:81:14:9c:11:50:13:98:0e:7c:
b3:69:f6:1f:fa:88:7c:2b:80:fd:1f:9e:00:69:cc:45:84:9e:
6d:e9:16:71:5b:92:9d:de:88:d1:32:6d:76:68:34:a4:1e:d3:
e8:cc:fa:20:b3:f8:9d:f1:3e:d7:e2:d9:04:d0:d0:ed:7c:96:
71:61:24:56:ca:3e:e2:30:a7:25:ac:9b:a2:90:8a:86:01:6b:
d5:38:08:f3:57:25:3f:48:06:47:cf:b9:36:56:0c:4e:a1:11:
26:5a:d1:b1:ba:10:a1:7b:82:c8:50:72:ed:86:60:53:04:9d:
8a:5c:4d:27:ad:0d:88:55:c2:5c:3a:4e:fb:05:e1:37:38:59:
e2:3b:a9:ce:98:6e:f8:92:9f:4f:90:3c:2e:c2:fd:67:9c:64:
f8:ac:58:60:68:20:20:ad:19:2c:b9:c3:ad:c5:bb:a7:7a:db:
19:8c:6e:f9:21:d5:6f:49:9a:75:a5:f3:94:2b:09:91:5b:61:
5f:e4:ca:7a:74:ba:ef:8d:16:3a:0e:6e:c7:1f:a9:8d:0f:c4:
21:60:4f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7tVkf51LM6twoPGtbfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjYwNDE3MDkwMDM4WhcNMjYwNDE4MDkwMDM4WjAzMTEwLwYDVQQD
Eyg4N2JlZDI4YzQ5YWUwNDAwNjM2N2ZhMWVmY2RlNzI1YTk5MjBlYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJzV0gyvFg14EeHzwYmJTZ2PI53L
sfQf4m1zDwBUi8rOQcaDXkZlCro4BiEORPEI8kf1sULeytKljJ6FMoFp9pWS1+WZ
ibfAdBuH/Y8AHvFYh5Vhl8nwC4Js+G3+Q1Z4kIul+22CnXPIKuBGbu6Hy99kFSXA
wknlNuxu/2gNHsXJzZSBw2Fl5waAEwM/rzhgkESoa8Qkk+egSM+zw+4iLcvejDLC
7U1FJ2T53ar565GXBhGPY0g49DwSUeLBAVrL8ieBJ7rZfsttUwt/GSde6/qWH9X1
ayefKYewpWOdXgXru4VG6q+ldizMccZ7PUF9LO+C1C83H6t3YaVOr1wRTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe+0oxJrgQAY2f6HvzeclqZIOtvMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSMXix9p
9su/Giw2cvVqcPE9kYKBO7zK1MVy7B8KoH13QwBdyEVIZySq6X/wgRScEVATmA58
s2n2H/qIfCuA/R+eAGnMRYSebekWcVuSnd6I0TJtdmg0pB7T6Mz6ILP4nfE+1+LZ
BNDQ7XyWcWEkVso+4jCnJaybopCKhgFr1TgI81clP0gGR8+5NlYMTqERJlrRsboQ
oXuCyFBy7YZgUwSdilxNJ60NiFXCXDpO+wXhNzhZ4jupzphu+JKfT5A8LsL9Z5xk
+KxYYGggIK0ZLLnDrcW7p3rbGYxu+SHVb0madaXzlCsJkVthX+TKenS6740WOg5u
xx+pjQ/EIWBPew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:04 2026 by rpki-client